> Privacy Policy

Who runs this site

CLIT Club is a private book club tracker run by one person for a small group of friends. It isn't a business, it has no advertising, and nothing on it is sold. For questions, or to have your information removed, contact the club's organizer.

What the site stores

• Club records — member first names, the books we read, who picked them, meeting dates, and the ratings given during meetings. These are visible to anyone who visits the site.
• Email addresses — one per member, used only to send calendar invitations for meetings. These are never shown publicly on the site.
• Google account data — when the organizer connects a Google account, the site stores a Google authorization token, the ID of the calendar event it creates for the club, and that event's meeting link.

How Google data is used

The site asks for one Google permission, View and edit events on all your calendars, and uses it for a single purpose: creating and updating the club's own meeting event on the organizer's calendar, and inviting members by email.

It does not read, change or store any other events on that calendar, and it does not use Google data for advertising, for training machine learning or AI models, for credit decisions, or for sale to anyone.

Who it's shared with

Nobody. Information isn't transferred or disclosed to third parties, other than the services needed to run the site: Google (to create the calendar invitation), Supabase (which hosts the database) and Vercel (which hosts the site). Meeting invitations are visible to the club members invited to them.

How it's protected

The site is served over HTTPS, so traffic is encrypted in transit. The database sits behind row-level security and is only reachable by the site's own server code using a secret key. Email addresses and Google tokens are never sent to the browser and are excluded from the site's public backups.

Keeping and deleting data

Club records are kept as long as the club keeps using the site. Disconnecting Google in the site's settings deletes the stored Google token immediately, which ends the site's access to that calendar. You can also revoke it yourself at your Google Account permissions page.

Removing a member deletes their email address. To have your name or ratings removed as well, ask the organizer and it will be done.

Changes

If this policy changes, the date at the top of the page changes with it.